Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/UdEOpYV3C8wcogELg7nHlPxMaJg.roa
File:                     UdEOpYV3C8wcogELg7nHlPxMaJg.roa (raw, json)
Hash identifier:          quhTl57372Zth/WML8su7cJxvb/3QhOHZsAEx05YMAw=
Subject key identifier:   51:D1:0E:A5:85:77:0B:CC:1C:A2:01:0B:83:B9:C7:94:FC:4C:68:98
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A8A2AB8436394DBCD7F27E82B1426185F
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/UdEOpYV3C8wcogELg7nHlPxMaJg.roa
Signing time:             Tue 12 Sep 2023 16:12:50 +0000
ROA not before:           Tue 12 Sep 2023 16:12:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8a:2a:b8:43:63:94:db:cd:7f:27:e8:2b:14:26:18:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 12 16:12:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=51d10ea585770bcc1ca2010b83b9c794fc4c6898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:23:fe:9f:1e:66:71:50:20:0b:40:a6:41:
                    fe:ca:1f:29:85:40:ee:ff:61:94:81:bb:e2:ea:8c:
                    24:a4:b5:35:89:77:b9:63:83:c5:cb:32:c7:6d:73:
                    7b:54:a1:a3:4e:29:cb:23:e1:3b:f3:ce:eb:77:89:
                    c5:17:ae:3c:4d:d6:78:7f:5a:8d:a3:63:9e:d8:2b:
                    fb:b0:0c:2a:f5:b3:e8:b3:fe:1c:98:2d:d0:d1:eb:
                    07:5e:6a:6a:93:e3:f1:3d:07:36:8d:bb:c0:f9:4d:
                    28:e6:0f:00:28:d2:34:02:5f:8b:98:ba:9b:45:b7:
                    72:10:33:81:df:c3:61:d4:72:7d:c5:3a:73:6a:30:
                    9a:1e:16:15:e0:ef:2e:bd:b4:8c:d5:60:d1:ca:9f:
                    e4:82:85:25:6d:9b:bf:2e:28:c3:a3:04:6a:69:d1:
                    5e:67:ec:61:4f:66:07:e1:97:f0:d7:ad:37:70:03:
                    6d:6a:78:75:0d:61:ba:dc:6f:f2:51:3a:eb:16:06:
                    e4:0c:a9:63:7c:0a:5e:0d:b6:6b:a5:c0:e4:24:d2:
                    fa:9e:b1:7c:d7:fe:cd:ef:6b:2d:3e:ff:05:b1:dd:
                    c7:d1:35:c5:c4:b9:f0:01:fc:c3:a7:e7:50:81:c2:
                    b5:59:d7:a5:0f:ea:cc:59:4f:c2:a2:55:55:9b:02:
                    7b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D1:0E:A5:85:77:0B:CC:1C:A2:01:0B:83:B9:C7:94:FC:4C:68:98
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/UdEOpYV3C8wcogELg7nHlPxMaJg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:31:73:02:26:da:68:bd:4e:e0:b5:70:b0:af:c5:36:fe:15:
         c9:7e:2c:e4:00:e5:33:49:e9:4a:36:69:b2:b5:9c:61:2d:e2:
         8d:72:b8:ee:c1:35:09:73:c1:2e:50:5d:18:e9:66:de:92:be:
         76:58:3d:9e:43:1f:38:04:10:cd:6e:df:7d:be:59:e8:ac:3b:
         0c:4c:7c:19:29:71:39:08:09:ba:c2:45:e1:72:df:b5:33:88:
         35:07:8e:98:17:06:a0:cf:a5:7e:f0:fb:a0:58:a3:a9:31:4b:
         8c:99:68:ad:5b:6d:45:04:74:93:d4:2d:59:76:29:14:de:d5:
         e9:74:45:01:b8:31:70:7d:a1:40:7e:09:37:33:b6:5b:18:b3:
         c5:77:3f:03:88:f7:9d:31:aa:2e:47:5f:65:1c:7b:32:9d:75:
         7a:33:e2:f0:d6:52:63:5c:23:0d:a8:1c:07:ab:53:24:bb:b2:
         3f:88:4a:c1:f6:4a:18:ee:23:f4:b4:ff:d3:40:2a:62:bc:a6:
         46:60:f8:ff:4a:6f:56:12:26:89:44:4b:bb:fe:54:d3:aa:b6:
         96:a9:22:41:ad:a6:03:16:59:7f:e4:53:9b:bf:42:73:c3:56:
         90:e4:08:8e:6b:e6:e3:5e:0e:14:85:59:c6:bb:cf:5f:9e:57:
         c7:4e:be:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----